Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b897b7d-2dc6-47ed-97aa-87129c2cb1d9.roa
File:                     2b897b7d-2dc6-47ed-97aa-87129c2cb1d9.roa (raw, json)
Hash identifier:          icm5qS2KVpLlCC25biFFM9uplEN/JUeTx4nhhjrUijI=
Subject key identifier:   BA:96:18:11:91:72:D4:68:A6:9D:32:AE:91:43:99:D5:F7:E6:3B:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61458F7CCDC4ACA3830F4E653CFB73344B7E5042
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b897b7d-2dc6-47ed-97aa-87129c2cb1d9.roa
Signing time:             Thu 01 Oct 2026 10:02:47 +0000
ROA not before:           Thu 01 Oct 2026 10:02:47 +0000
ROA not after:            Wed 30 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:45:8f:7c:cd:c4:ac:a3:83:0f:4e:65:3c:fb:73:34:4b:7e:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 10:02:47 2026 GMT
            Not After : Dec 30 23:59:59 2026 GMT
        Subject: serialNumber=2bb445c8b6e4dc98328ea779bb8ebb354a38486f7d44b93a2111f5c3e5ae473c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:a2:d6:dd:85:7d:2c:d9:70:60:80:82:3b:
                    2d:8a:bf:f9:9f:e4:ea:a7:67:69:93:32:c5:d4:6f:
                    31:ff:67:61:a3:80:89:01:9a:28:d5:fd:b6:0a:5c:
                    39:c1:7f:45:b2:77:8c:d3:66:bf:85:d3:68:0e:f0:
                    c7:69:55:58:09:fd:40:ab:76:ce:02:2d:4f:da:56:
                    cd:ba:e5:ab:ce:84:96:77:01:df:5d:b9:e2:53:65:
                    80:ae:4c:9a:3d:e4:70:12:87:d2:e1:f4:bf:00:c5:
                    4f:7c:67:91:52:06:bf:24:b2:29:8a:c5:3f:51:75:
                    34:e4:56:9e:36:1e:fb:94:35:9e:4a:02:a2:7b:90:
                    2f:31:28:13:9d:2e:b4:b3:40:62:a2:e3:58:2d:b6:
                    3a:f4:55:57:6a:a8:ab:c8:2c:d2:f2:6f:3e:8f:70:
                    66:77:59:4a:17:1d:29:f6:94:09:9d:f7:c5:0d:cf:
                    e8:0a:a2:10:63:f2:e6:50:e2:09:de:5d:d5:6c:a5:
                    69:72:df:ab:fd:37:70:dc:55:c8:cc:8d:fb:ff:85:
                    25:45:d1:8e:c2:b1:da:3a:af:ea:0b:4f:fa:dc:cb:
                    e9:74:d8:f4:dc:2f:d2:cf:04:cc:9d:07:d2:17:d6:
                    d5:5f:bb:2d:b1:80:b0:35:7a:a1:37:53:3d:38:2b:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:96:18:11:91:72:D4:68:A6:9D:32:AE:91:43:99:D5:F7:E6:3B:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b897b7d-2dc6-47ed-97aa-87129c2cb1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:ab:aa:94:e9:dc:10:9d:21:51:59:e5:21:da:73:5c:ef:
         4a:58:b2:f1:88:c6:b9:c5:4e:7c:34:e1:64:0b:a0:90:d5:06:
         3c:44:84:55:1c:95:33:ae:45:5f:be:02:cf:6a:fc:e0:11:09:
         0b:f4:b0:b1:fb:bf:f8:a1:f7:34:95:a8:43:fd:72:30:96:36:
         74:8b:47:95:91:33:20:fe:28:89:13:22:f3:a5:83:ce:06:60:
         b7:c9:82:74:9c:b1:98:d2:f1:a6:7a:1f:81:ac:bb:68:59:25:
         c9:ec:c1:d7:86:aa:47:56:a8:43:ce:f7:ac:55:5c:62:cd:8b:
         8c:75:1a:07:b4:67:5e:02:36:92:83:5f:9d:17:41:c5:d4:fe:
         97:63:ed:58:6a:4c:9e:c2:a2:a1:b4:4d:ba:0b:59:ab:91:f5:
         08:43:ff:3f:b1:55:30:0b:97:a3:bf:f6:09:db:69:ab:4f:06:
         36:a6:15:5c:12:c6:0e:21:a6:6d:bd:25:40:ee:d0:43:8f:7b:
         f1:01:bd:58:d7:f6:c8:31:13:96:22:17:f3:20:9d:0c:8e:f2:
         27:31:f1:3a:b1:12:e5:90:1b:fc:1a:30:1d:06:9e:a7:45:3e:
         04:b0:55:5a:09:cb:c5:9a:04:36:e3:5a:eb:43:2d:fe:ee:91:
         68:72:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:54:59 2026 by rpki-client